Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Operating Systems
Windows 10
OS Archive
Enable Retpoline on Windows 10 1809 and Server right now
Message
<blockquote data-quote="CyberTech" data-source="post: 802113" data-attributes="member: 67474"><p>Microsoft has tested Retpoline, a new mitigation method against Spectre variant 2 by Google, on Windows 10 Insider Builds for some time now. The company brought Retpoline to Windows 10 version 1809 by including it in the <a href="https://www.ghacks.net/2019/03/02/kb4482887-for-windows-10-version-1809/" target="_blank">March 1 cumulative update KB4482887</a> for the version of Windows 10.</p><p></p><p><strong>Tip</strong>: use the<a href="https://www.ghacks.net/2018/04/12/new-inspectre-release-reveals-if-microcode-updates-are-available/" target="_blank"> free InSpectre program for Windows</a> check the vulnerability status.</p><p></p><p>Retpoline promises improved performance compared to the previous mitigation method used by Microsoft in its operating systems. Microsoft monitored the performance of Windows 10 systems and determined that Retpoline improved the launch time of Office applications by about 25% among other benefits.</p><p></p><p></p><p></p><p></p><p></p><p></p><p>Retpoline is not enabled by default on production devices even though it is included in the March 1 update. Microsoft plans to roll out the mitigation over the course of the coming months.</p><p></p><p>Administrators who don't want to wait can enable Retpoline right away provided that the devices run Windows 10 version 1809 and have the latest cumulative update installed.</p><p></p><p>Microsoft employee Mehmet Iyigun describes the process on the <a href="https://techcommunity.microsoft.com/t5/Windows-Kernel-Internals/Mitigating-Spectre-variant-2-with-Retpoline-on-Windows/ba-p/295618" target="_blank">Tech Community</a> site. Note that it is recommended that you back up the system and data before you apply the change.</p><p></p><p></p><p><strong>Windows 10 Clients</strong></p><p></p><p><img src="https://www.ghacks.net/wp-content/uploads/2019/03/regpoline-windows-10.png" alt="regpoline windows 10" class="fr-fic fr-dii fr-draggable " style="" /></p><p></p><p><strong>Note</strong>: Microsoft did not enclose the Registry key path with "". If you copy paste Microsoft's command you will receive an error.</p><ol> <li data-xf-list-type="ol">Open an elevated command prompt, e.g. by opening Start, typing cmd.exe, right-clicking on the result, and selecting run as administrator.</li> <li data-xf-list-type="ol">Run the following two commands:<ol> <li data-xf-list-type="ol">reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0x400<ol> <li data-xf-list-type="ol">When prompted to overwrite the existing value, select Y for yes.</li> </ol></li> <li data-xf-list-type="ol">reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 0x400<ol> <li data-xf-list-type="ol">When prompted to overwrite the existing value, select Y for yes.</li> </ol></li> </ol></li> <li data-xf-list-type="ol">Restart the PC.</li> </ol><p><strong>Alternative</strong>: use the following Registry file to make the change with a double-click on it: <a href="https://www.ghacks.net/download/150490/" target="_blank"> Regpoline Windows 10 Client</a></p><p></p><p><img src="https://www.ghacks.net/wp-content/uploads/2019/03/registry-edited.png" alt="registry edited" class="fr-fic fr-dii fr-draggable " style="" /></p><p></p><p><strong>Windows 10 Server</strong></p><ol> <li data-xf-list-type="ol">Open an elevated command prompt.</li> <li data-xf-list-type="ol">Run the following two commands:<ol> <li data-xf-list-type="ol">reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0x400</li> <li data-xf-list-type="ol">reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 0x401</li> </ol></li> <li data-xf-list-type="ol">Restart the PC.</li> </ol><p>And here is the Registry file for Windows 10 Server versions: <a href="https://www.ghacks.net/download/150492/" target="_blank"> Windows 10 Server Regpoline</a></p><p>Note that you can make the changes in the Registry editor directly as well if you prefer to do so.</p><p></p><p></p><p><span style="font-size: 18px"><strong>Verification</strong></span></p><p></p><p><img src="https://www.ghacks.net/wp-content/uploads/2019/03/retpoline.png" alt="retpoline" class="fr-fic fr-dii fr-draggable " style="" /></p><p></p><p>You may use the <a href="https://support.microsoft.com/en-us/help/4074629/understanding-the-output-of-get-speculationcontrolsettings-powershell" target="_blank">Get-SpeculationControlSettings PowerShell cmdlet</a> to verify the status of Retpoline. BTIKernelRetpolineEnabled and BTIKernelImportOptimizationEnabled should be returned as True in the output.</p><p></p><p>Microsoft notes that Skylake and newer generations of Intel processors are not compatible with Retpoline; these will only return BTIKernelImportOptimizationEnabled as enabled when the command is run.</p><p></p><p>Source: <a href="https://www.ghacks.net/2019/03/06/enable-retpoline-on-windows-10-1809-and-server-right-now/" target="_blank">Enable Retpoline on Windows 10 1809 and Server right now - gHacks Tech News</a></p></blockquote><p></p>
[QUOTE="CyberTech, post: 802113, member: 67474"] Microsoft has tested Retpoline, a new mitigation method against Spectre variant 2 by Google, on Windows 10 Insider Builds for some time now. The company brought Retpoline to Windows 10 version 1809 by including it in the [URL='https://www.ghacks.net/2019/03/02/kb4482887-for-windows-10-version-1809/']March 1 cumulative update KB4482887[/URL] for the version of Windows 10. [B]Tip[/B]: use the[URL='https://www.ghacks.net/2018/04/12/new-inspectre-release-reveals-if-microcode-updates-are-available/'] free InSpectre program for Windows[/URL] check the vulnerability status. Retpoline promises improved performance compared to the previous mitigation method used by Microsoft in its operating systems. Microsoft monitored the performance of Windows 10 systems and determined that Retpoline improved the launch time of Office applications by about 25% among other benefits. Retpoline is not enabled by default on production devices even though it is included in the March 1 update. Microsoft plans to roll out the mitigation over the course of the coming months. Administrators who don't want to wait can enable Retpoline right away provided that the devices run Windows 10 version 1809 and have the latest cumulative update installed. Microsoft employee Mehmet Iyigun describes the process on the [URL='https://techcommunity.microsoft.com/t5/Windows-Kernel-Internals/Mitigating-Spectre-variant-2-with-Retpoline-on-Windows/ba-p/295618']Tech Community[/URL] site. Note that it is recommended that you back up the system and data before you apply the change. [B]Windows 10 Clients[/B] [IMG alt="regpoline windows 10"]https://www.ghacks.net/wp-content/uploads/2019/03/regpoline-windows-10.png[/IMG] [B]Note[/B]: Microsoft did not enclose the Registry key path with "". If you copy paste Microsoft's command you will receive an error. [LIST=1] [*]Open an elevated command prompt, e.g. by opening Start, typing cmd.exe, right-clicking on the result, and selecting run as administrator. [*]Run the following two commands: [LIST=1] [*]reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0x400 [LIST=1] [*]When prompted to overwrite the existing value, select Y for yes. [/LIST] [*]reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 0x400 [LIST=1] [*]When prompted to overwrite the existing value, select Y for yes. [/LIST] [/LIST] [*]Restart the PC. [/LIST] [B]Alternative[/B]: use the following Registry file to make the change with a double-click on it: [URL='https://www.ghacks.net/download/150490/'] Regpoline Windows 10 Client[/URL] [IMG alt="registry edited"]https://www.ghacks.net/wp-content/uploads/2019/03/registry-edited.png[/IMG] [B]Windows 10 Server[/B] [LIST=1] [*]Open an elevated command prompt. [*]Run the following two commands: [LIST=1] [*]reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0x400 [*]reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 0x401 [/LIST] [*]Restart the PC. [/LIST] And here is the Registry file for Windows 10 Server versions: [URL='https://www.ghacks.net/download/150492/'] Windows 10 Server Regpoline[/URL] Note that you can make the changes in the Registry editor directly as well if you prefer to do so. [SIZE=5][B]Verification[/B][/SIZE] [IMG alt="retpoline"]https://www.ghacks.net/wp-content/uploads/2019/03/retpoline.png[/IMG] You may use the [URL='https://support.microsoft.com/en-us/help/4074629/understanding-the-output-of-get-speculationcontrolsettings-powershell']Get-SpeculationControlSettings PowerShell cmdlet[/URL] to verify the status of Retpoline. BTIKernelRetpolineEnabled and BTIKernelImportOptimizationEnabled should be returned as True in the output. Microsoft notes that Skylake and newer generations of Intel processors are not compatible with Retpoline; these will only return BTIKernelImportOptimizationEnabled as enabled when the command is run. Source: [URL="https://www.ghacks.net/2019/03/06/enable-retpoline-on-windows-10-1809-and-server-right-now/"]Enable Retpoline on Windows 10 1809 and Server right now - gHacks Tech News[/URL] [/QUOTE]
Insert quotes…
Verification
Post reply
Top
